| 제목 | Max Secure Anti Virus Plus, MaxCryptMon.sys, DoS |
|---|
| 설명 | Max Secure Anti Virus Plus x.x.x.x, MaxCryptMon.sys x.x.x.x, DoS
https://www.maxpcsecure.com/download.htm
Impact: Denial of Service
Description: From IoControlCode 0x220019, a normal user can cause DoS due to the lack of validating SystemBuffer.
Reproduce: In the attached file DoS.zip, there are DoS.exe, DoS.cpp, MaxAVPlusDM.exe, and MaxCryptMon.sys. DoS.exe is the PoC to cause BSOD where MaxAVPlusDM.exe which contains the vulnerable driver MaxCryptMon.sys is installed, and DoS.cpp is the source code of DoS.exe. To reproduce the issue, just install MaxAVPlusDM.exe and execute DoS.exe. It is expected that the system will crash (BSOD) once DoS.exe is executed. Password for attachment: DoS
https://drive.google.com/file/d/1gp5PD6MTigr4hQQinfFbN9xX9nZmL3OC/view?usp=sharing |
|---|
| 원천 | ⚠️ https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned21 |
|---|
| 사용자 | Zeze7w (UID 40823) |
|---|
| 제출 | 2023. 03. 17. PM 02:57 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 03. 18. PM 09:19 (1 day later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 112432 [Max Secure Anti Virus 19.0.3.019 Driver MaxCryptMon.sys 권한 상승] |
|---|
| 포인트들 | 0 |
|---|